WordPress Dynamic URL SEO plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Dynamic URL SEO versions = 1.0...

Important: Red Hat Bug Fix Advisory: LVMS 4.17.4 Bug Fix Update

Updated container images that fix multiple bugs are now available for LVMS 4.17 Logical Volume Manager Storage uses lvm2 through the TopoLVM CSI driver to dynamically provision thin and thick local storage on a cluster with limited resources. Users of LVMS are advised to upgrade to the latest...

Edimax BR-6476AC security vulnerabilities

Edimax BR-6476AC is a dual-band router from China Xunzhou Edimax. A security vulnerability exists in the Edimax BR-6476AC version 1.06, which stems from /goform/fromSetDDNS does not properly handle special characters entered by the user, allowing an attacker to inject and execute arbitrary shell...

Rockwell Automation PowerMonitor Buffer Overflow

The vulnerability of the microprogramming software of the Rockwell Automation PowerMonitor 1000 monitoring and control device is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause a service failure...

PT-2025-3718 · Toolstick · Toolstick

Name of the Vulnerable Software and Affected Versions: ToolStick affected versions not specified Description: The issue is caused by an uncontrolled search path in the ToolStick installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation and arbitrary code executi...

PT-2025-3720 · Silicon · Cp210X Vcp Windows Installer

Name of the Vulnerable Software and Affected Versions: CP210x VCP Windows installer affected versions not specified Description: The issue is caused by an uncontrolled search path in the CP210x VCP Windows installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalatio...

PT-2025-3722 · Unknown · Usbxpress 4 Sdk

Name of the Vulnerable Software and Affected Versions: USBXpress 4 SDK affected versions not specified Description: The issue is related to DLL hijacking vulnerabilities caused by an uncontrolled search path in the USBXpress 4 SDK installer. This can lead to privilege escalation and arbitrary cod...

PT-2025-3719 · Silicon · Cp210 Vcp Win 2K Installer

Name of the Vulnerable Software and Affected Versions: CP210 VCP Win 2k installer affected versions not specified Description: The issue is caused by an uncontrolled search path in the installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation and arbitrary code...

Important: Red Hat Security Advisory: python-jinja2 security update

An update for python-jinja2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Important: python-jinja2 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

PT-2025-2972 · Itop Vpn · Itop Vpn

Name of the Vulnerable Software and Affected Versions: iTop VPN version 16.0 Description: A DLL hijacking issue allows attackers to execute arbitrary code by placing a crafted DLL file into the path ProgramDataiTop VPNDownloadervpn6. This enables attackers to trick iTop VPN into loading a fake DL...

Windows Telephony Service Code Execution

The vulnerability of the Windows operating system’s Telephony Service is related to overflowing buffers in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Windows Telephony Service Code Execution

The vulnerability of the Windows operating system’s Telephony Service is related to overflowing buffers in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

libspeech DoS

The vulnerability of the libspeech service in the Mercedes-Benz User Experience MBUX multimedia system is related to the buffer overflow in dynamic memory during the processing of UD2 format files. Exploiting this vulnerability can allow an attacker to cause a service failure...

Microsoft 365 Apps for Enterprise Buffer Overflow

The vulnerability of Microsoft 365 Apps for Enterprise, Microsoft Office, and the Microsoft Access database management system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2024-57543

Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field dhcpstartip is copied to the stack without length verification...

Security update for dhcp

This update for dhcp fixes the following issues: Fixed dhcp not starting in case group nogroup is missing bsc1192020 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed...

Scaling Dynamic Application Security Testing (DAST)

Introduction Microsoft engineering teams use the Security Development Lifecycle to ensure our products are built in alignment with Microsoft’s Secure Future Initiative security principles: Secure by Design, Secure by Default, and Secure Operations. A key component of the Security Development...

MacPaw Way The Unarchiver security vulnerability

MacPaw Way The Unarchiver is a free decompression software from MacPaw Way that supports many common and older compression formats. A security vulnerability exists in MacPaw Way The Unarchiver version 6.4.0, which originated from a vulnerability that allows an attacker to inject arbitrary code vi...

System.Linq.Dynamic.Core security vulnerability

System.Linq.Dynamic.Core is a .NET Core/Standard port of the Microsoft assembly for .NET 4.0 Dynamic Language Features open-sourced by ZZZ Projects. A security vulnerability exists in System.Linq.Dynamic.Core version 1.4.6, which stems from a vulnerability that allows remote access to properties ...